CVE-2018-1000087

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker can execute the JavaScript into the "Create New File" and "Create New Directory" input box from 'files'.

• CWE-79

• https://cveexploit.blogspot.in/Exploit, Third Party Advisory
• https://github.com/wolfcms/wolfcms/issues/666Exploit, Issue Tracking, Third Party Advisory
• https://cveexploit.blogspot.in/Exploit, Third Party Advisory
• https://github.com/wolfcms/wolfcms/issues/666Exploit, Issue Tracking, Third Party Advisory

Published

Mar 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000081Ajenti version version 2 contains a Input Validation vulnera…
• CVE-2018-1000082Ajenti version version 2 contains a Cross ite Request Forger…
• CVE-2018-1000083Ajenti version version 2 contains a Improper Error Handling …
• CVE-2018-1000084WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cr…
• CVE-2018-1000085ClamAV version version 0.99.3 contains a Out of bounds heap …
• CVE-2018-1000086NPR Visuals Team Pym.js version versions 0.4.2 up to 1.3.1 c…
• CVE-2018-1000088Doorkeeper version 2.1.0 through 4.2.5 contains a Cross Site…
• CVE-2018-1000089Anymail django-anymail version version 0.2 through 1.3 conta…
• CVE-2018-1000090textpattern version version 4.6.2 contains a XML Injection v…
• CVE-2018-1000091KadNode version version 2.2.0 contains a Buffer Overflow vul…
• CVE-2018-1000092CMS Made Simple version versions 2.2.5 contains a Cross ite …
• CVE-2018-1000093CryptoNote version version 0.8.9 and possibly later contain …